can you try current svn version of ethereal?
reassembly of tcp has been updated.
if it is still broken can you provide an example capture file that
is broken also under current svn?
On 5/24/06, Grossert, Alexander <Alexander.Grossert@xxxxxxxxxxx> wrote:
Hello.
I'm stuck trying to reassemble PDUs of an internal protocoll of my
company.
It runs on top of TCP and the problem is, that my PDUs are scattered on
Frame-level, too.
This means I get the first PDU starting in Frame 9. It reaches into
Frame 10 and a few bytes (not more than 14 or so) arrive in Frame 12
together with the next PDU. When I ask TCP to reassemble my PDUs I
provide the number of bytes I want to have. It puts together Frames 9
and 10 correctly, but it also adds the complete Frame 12. This causes
that the second PDU is regarded as payload of the first one.
It seems the TCP dissector always takes complete frames instead of the
bytes I ask for only. So instead of 2063 Bytes that I asked for I get 3
complete frames with 3077 Bytes.
Anyone an idea how I can make the TCP dissector reassemble single bytes
instead of the complete frames?
Thanks, Alex
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev